CVE-2020-26943

2 advisories.

PyPI/blazar-dashboard CVE-2020-26943: critical 9.9, EPSS 3.29%

Arbitrary Code Execution in blazar-dashboard

Action: Upgrade blazar-dashboard to 1.3.1 or later.

pip install blazar-dashboard==1.3.1

pip install blazar-dashboard==2.0.1

pip install blazar-dashboard==3.0.1

Affected

introduced	fixed	last affected
0	1.3.1	-
2.0.0	2.0.1	-
3.0.0	3.0.1	-

Fixed versions

1.3.1

2.0.1

3.0.1

Sources

CVE-2020-26943 · published 2020-10-27T17:55:04Z · modified 2024-09-06T16:33:53.133866Z · JSON

PyPI/blazar-dashboard CVE-2020-26943: unknown, EPSS 3.29%

An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0. A user allowed to access the Blazar dashboard in Horizon may trigger code execution on the Horizon host as the use